beatzaplenty/autorecon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty
2026-04-14 17:49:38 +10:00
parent c8f17a17e6
commit 3c3a192c79
1252 changed files with 4574573 additions and 1993899 deletions
Download Patch File Download Diff File Expand all files Collapse all files
results/portainer.lan.ddnsgeek.com/report/notes.txt
-4
View File
@@ -2,10 +2,6 @@
[*] http found on tcp/443.
[*] tcpwrapped found on tcp/51413.
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Commands.md
+1 -19
View File
@@ -3,8 +3,6 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/portainer.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/portainer.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" portainer.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/portainer.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/portainer.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" portainer.lan.ddnsgeek.com
feroxbuster -u http://portainer.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
curl -sSikf http://portainer.lan.ddnsgeek.com:80/.well-known/security.txt
@@ -21,23 +19,7 @@ ffuf -u http://portainer.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Disco
whatweb --color=never --no-errors -a 3 -v http://portainer.lan.ddnsgeek.com:80 2>&1
feroxbuster -u https://portainer.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
curl -sSikf https://portainer.lan.ddnsgeek.com:443/.well-known/security.txt
curl -sSikf https://portainer.lan.ddnsgeek.com:443/robots.txt
curl -sSik https://portainer.lan.ddnsgeek.com:443/
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://portainer.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" portainer.lan.ddnsgeek.com
sslscan --show-certificate --no-colour portainer.lan.ddnsgeek.com:443 2>&1
ffuf -u https://portainer.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.portainer.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_portainer.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
whatweb --color=never --no-errors -a 3 -v https://portainer.lan.ddnsgeek.com:443 2>&1
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/portainer.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/portainer.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" portainer.lan.ddnsgeek.com
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Manual Commands.md
-20
View File
@@ -19,25 +19,5 @@
wpscan --url http://portainer.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
[*] http on tcp/443
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
feroxbuster -u https://portainer.lan.ddnsgeek.com:443 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt
[-] Credential bruteforcing commands (don't run these without modifying them):
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_hydra.txt" https-get://portainer.lan.ddnsgeek.com/path/to/auth/area
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_medusa.txt" -M http -h portainer.lan.ddnsgeek.com -m DIR:/path/to/auth/area
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_hydra.txt" https-post-form://portainer.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_medusa.txt" -M web-form -h portainer.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
wpscan --url https://portainer.lan.ddnsgeek.com:443/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_wpscan.txt"
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md
+20 -75
View File
@@ -5,85 +5,32 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
[/root/results/portainer.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:39:33 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/portainer.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml portainer.lan.ddnsgeek.com
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 25 dropped probes since last increase.
# Nmap 7.99 scan initiated Tue Apr 14 04:04:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/portainer.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml portainer.lan.ddnsgeek.com
Nmap scan report for portainer.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.020s latency).
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:39:43 UTC for 15522s
Not shown: 65531 filtered tcp ports (no-response)
Scanned at 2026-04-14 04:04:53 UTC for 610s
Not shown: 65532 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://portainer.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| ssl-cert: Subject: commonName=portainer.lan.ddnsgeek.com
| Subject Alternative Name: DNS:portainer.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-03-19T09:47:23
| Not valid after: 2026-06-17T09:47:22
| MD5: 12a6 7c4c 23c9 3149 5ed2 0505 d27d cf82
| SHA-1: d88e c436 92eb 0972 bc38 4c7e dde3 6592 d780 a161
| SHA-256: a4e1 b4e5 d74c 54a1 1019 f4f9 a033 1555 9ca8 69e9 fc19 357e f225 f9a7 41b7 194b
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBsg1ZLJw0cv2UfvVzu+cQlgCMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMzE5MDk0NzIzWhcNMjYwNjE3MDk0NzIyWjAlMSMwIQYDVQQD
| Expwb3J0YWluZXIubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAKMm47zvPNfZfTFU/Mp0UZqbT4C+UqTU/+zZZLh0nF4XDFRQ
| O3Fu+VU3QzMpG8T99mzoT8c9MsybotIHE1nubHT8nemTekDw6hY6FUV0dYwrL62w
| 1J7YwgOi+kpvRc5rUg4L85CV3d/xC8J+mwt82T+4Ow4DJlY+e/RgTsoo7bf5X1kq
| BW/m6LnuCEFF7rX/4n+IVn735mEFFWAFn0S5TPWbMKDrmg//F3Zne5DoJqC9Lj1r
| KFHedTlrda63RekxvNLpwHSMbNuZ52LAUh1+wGnM8ymcw33KG4mtYNiBhqLnvq+v
| DmopRkPYlmqg7PCfy30LmfIfV+BMkZme4O24E2Y7xl/yDT56BSDL3/yW4hs46kiq
| zbp7HIRYDJ5PWiHS8nJ3v9q/LblszAXC0HxWyWs68zCcsYZcd1EDiV/FRT9m6jeT
| ryO8I+lnhxDLS6a6NPck1iQK5FObfTaSu1cYF01P2hAExnn5sFgyGcnp4P2rVx9i
| WvylkAoU1cqKHtUcky1MSfsZuWUE47AJNRv3Yj110ENQc1S/Wa9kkwKXwkhJ81BH
| JWPWWSFjIku2V6w+EI976BeyrdZuVtsxVf0wwJCh8sejFxICevMUMNHncsH4UFgv
| 43JTdlHjwtH9xlOGxkrnAIK39t1ULZzSSEqjzny5CJR08ZiL7k+KTnS8TscNAgMB
| AAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGBkTAWvzSygsPNmDUx6ZR2WckyEwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpw
| b3J0YWluZXIubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAt
| BgNVHR8EJjAkMCKgIKAehhxodHRwOi8vcjEzLmMubGVuY3Iub3JnLzMuY3JsMIIB
| DAYKKwYBBAHWeQIEAgSB/QSB+gD4AHYAlpdkv1VYl633Q4doNwhCd+nwOtX2pPM2
| bkakPw/KqcYAAAGdBbOpdAAABAMARzBFAiEAgUwjInt0rBtOYCN6nCrD1EKL7pEA
| /QY7Lj/wPotVO6gCIHlsJomZx8u4ML7EYkV2KYf32Zpc7lZ8iO+wFEJpf095AH4A
| qCbL4wrGNRJGUz/gZfFPGdluGQgTxB3ZbXkAsxI8VScAAAGdBbOswQAIAAAFAAOB
| KpMEAwBHMEUCIQDhamf7YTSbsGRXMfSq2+PkLunyjAqmlaOxhbQgKASD+wIgW+dm
| FufaFc9vCQBEpGE3CzHTcl5udMxxnelbVFvvhk8wDQYJKoZIhvcNAQELBQADggEB
| AB3uEKA2bL7g+07pANuiJ0JPnEkRterVO2aHBoKNxvguz+wLMhLKDma3SXbdggYp
| SIxzjtkSdovQQli4pgy/Bd2jA3SnSXv7YEuESMLBo4HaKrA4lb0gMC32kQ6id2hH
| 5syYKV/rRwF/a6O44ZvPY4LI1iDI+gl5WtGqdi4vQj7zI+fmcNYZKw/Oy5IQ8XMt
| yJAvX19M7OFNANflS9iIcMJYSYAESbqcJfFtLpmH/x6KMWV2RCRz7nf2IlndeJOl
| nU1nvv8d3RO0AE76kBHDLwJjM7leI030imdtzQjHv0ec4B0ppRZS7xGJc8p8hImS
| qIzE87xRUM0BPYpFB2untK4=
|_-----END CERTIFICATE-----
|_http-title: Portainer
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_ssl-date: TLS randomness does not represent time
20001/tcp closed microsan reset ttl 57
51413/tcp open tcpwrapped syn-ack ttl 56
Device type: general purpose
Running (JUST GUESSING): Linux 4.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:4
Running (JUST GUESSING): Linux 5.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
Aggressive OS guesses: Linux 4.19 - 5.15 (88%)
Aggressive OS guesses: Linux 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25C71%P=x86_64-pc-linux-gnu)
SEQ(SP=104%GCD=1%ISR=107%TI=Z%TS=A)
SEQ(SP=106%GCD=1%ISR=10A%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBF47%P=x86_64-pc-linux-gnu)
SEQ(TI=Z%TS=A)
SEQ(SP=103%GCD=1%ISR=10B%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
@@ -91,28 +38,26 @@ T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
Uptime guess: 17.139 days (since Thu Mar 19 09:37:52 2026)
Uptime guess: 49.693 days (since Mon Feb 23 11:37:20 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=260 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 20001/tcp)
HOP RTT ADDRESS
1 0.27 ms 10.216.0.161
2 0.40 ms 10.216.35.12
3 0.91 ms 10.216.32.1
4 0.53 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 1.66 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.65 ms 10.241.1.185
7 12.59 ms 10.241.2.26
8 17.82 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.06 ms 10.216.0.161
2 0.16 ms 10.216.35.12
3 3.70 ms 10.216.32.2
4 0.49 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 3.86 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.64 ms 10.241.1.187
7 12.59 ms 10.241.2.71
8 13.84 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 12:58:25 2026 -- 1 IP address (1 host up) scanned in 15539.10 seconds
# Nmap done at Tue Apr 14 04:15:03 2026 -- 1 IP address (1 host up) scanned in 619.95 seconds
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md
+19 -16
View File
@@ -5,36 +5,39 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/portainer.la
[/root/results/portainer.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:39:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/portainer.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml portainer.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:07:03 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/portainer.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml portainer.lan.ddnsgeek.com
Nmap scan report for portainer.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (-0.97s latency).
Host is up, received user-set (0.80s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:40:59 UTC for 1331s
Scanned at 2026-04-14 04:07:04 UTC for 1457s
All 100 scanned ports on portainer.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%DS=30%DC=T%G=N%TM=69D2254F%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=17%DC=T%G=N%TM=69DDC31A%P=x86_64-pc-linux-gnu)
SEQ()
SEQ(TS=1E)
T7(R=Y%DF=Y%TG=40%W=1F9%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
U1(R=N)
IE(R=N)
Network Distance: 30 hops
Uptime guess: 20557.188 days (since Wed Dec 31 23:59:57 1969)
Network Distance: 17 hops
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.11 ms 10.216.0.161
2 0.28 ms 10.216.35.11
3 0.90 ms 10.216.32.2
4 0.69 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.50 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.72 ms 10.241.1.187
7 12.47 ms 10.241.2.71
8 ... 29
30 -- 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
HOP RTT ADDRESS
1 0.06 ms 10.216.0.161
2 0.42 ms 10.216.35.12
3 0.90 ms 10.216.32.2
4 0.47 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.14 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.73 ms 10.241.1.185
7 12.36 ms 10.241.2.26
8 ... 16
17 801.37 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:03:11 2026 -- 1 IP address (1 host up) scanned in 1414.49 seconds
# Nmap done at Tue Apr 14 04:31:23 2026 -- 1 IP address (1 host up) scanned in 1460.58 seconds
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md
+26 -76
View File
@@ -5,80 +5,30 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
[/root/results/portainer.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:35:33 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/portainer.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml portainer.lan.ddnsgeek.com
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 25 dropped probes since last increase.
# Nmap 7.99 scan initiated Tue Apr 14 04:04:06 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/portainer.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml portainer.lan.ddnsgeek.com
Nmap scan report for portainer.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.019s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:35:46 UTC for 226s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
Scanned at 2026-04-14 04:04:08 UTC for 32s
Not shown: 999 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://portainer.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
| ssl-cert: Subject: commonName=portainer.lan.ddnsgeek.com
| Subject Alternative Name: DNS:portainer.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-03-19T09:47:23
| Not valid after: 2026-06-17T09:47:22
| MD5: 12a6 7c4c 23c9 3149 5ed2 0505 d27d cf82
| SHA-1: d88e c436 92eb 0972 bc38 4c7e dde3 6592 d780 a161
| SHA-256: a4e1 b4e5 d74c 54a1 1019 f4f9 a033 1555 9ca8 69e9 fc19 357e f225 f9a7 41b7 194b
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBsg1ZLJw0cv2UfvVzu+cQlgCMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMzE5MDk0NzIzWhcNMjYwNjE3MDk0NzIyWjAlMSMwIQYDVQQD
| Expwb3J0YWluZXIubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAKMm47zvPNfZfTFU/Mp0UZqbT4C+UqTU/+zZZLh0nF4XDFRQ
| O3Fu+VU3QzMpG8T99mzoT8c9MsybotIHE1nubHT8nemTekDw6hY6FUV0dYwrL62w
| 1J7YwgOi+kpvRc5rUg4L85CV3d/xC8J+mwt82T+4Ow4DJlY+e/RgTsoo7bf5X1kq
| BW/m6LnuCEFF7rX/4n+IVn735mEFFWAFn0S5TPWbMKDrmg//F3Zne5DoJqC9Lj1r
| KFHedTlrda63RekxvNLpwHSMbNuZ52LAUh1+wGnM8ymcw33KG4mtYNiBhqLnvq+v
| DmopRkPYlmqg7PCfy30LmfIfV+BMkZme4O24E2Y7xl/yDT56BSDL3/yW4hs46kiq
| zbp7HIRYDJ5PWiHS8nJ3v9q/LblszAXC0HxWyWs68zCcsYZcd1EDiV/FRT9m6jeT
| ryO8I+lnhxDLS6a6NPck1iQK5FObfTaSu1cYF01P2hAExnn5sFgyGcnp4P2rVx9i
| WvylkAoU1cqKHtUcky1MSfsZuWUE47AJNRv3Yj110ENQc1S/Wa9kkwKXwkhJ81BH
| JWPWWSFjIku2V6w+EI976BeyrdZuVtsxVf0wwJCh8sejFxICevMUMNHncsH4UFgv
| 43JTdlHjwtH9xlOGxkrnAIK39t1ULZzSSEqjzny5CJR08ZiL7k+KTnS8TscNAgMB
| AAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGBkTAWvzSygsPNmDUx6ZR2WckyEwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpw
| b3J0YWluZXIubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAt
| BgNVHR8EJjAkMCKgIKAehhxodHRwOi8vcjEzLmMubGVuY3Iub3JnLzMuY3JsMIIB
| DAYKKwYBBAHWeQIEAgSB/QSB+gD4AHYAlpdkv1VYl633Q4doNwhCd+nwOtX2pPM2
| bkakPw/KqcYAAAGdBbOpdAAABAMARzBFAiEAgUwjInt0rBtOYCN6nCrD1EKL7pEA
| /QY7Lj/wPotVO6gCIHlsJomZx8u4ML7EYkV2KYf32Zpc7lZ8iO+wFEJpf095AH4A
| qCbL4wrGNRJGUz/gZfFPGdluGQgTxB3ZbXkAsxI8VScAAAGdBbOswQAIAAAFAAOB
| KpMEAwBHMEUCIQDhamf7YTSbsGRXMfSq2+PkLunyjAqmlaOxhbQgKASD+wIgW+dm
| FufaFc9vCQBEpGE3CzHTcl5udMxxnelbVFvvhk8wDQYJKoZIhvcNAQELBQADggEB
| AB3uEKA2bL7g+07pANuiJ0JPnEkRterVO2aHBoKNxvguz+wLMhLKDma3SXbdggYp
| SIxzjtkSdovQQli4pgy/Bd2jA3SnSXv7YEuESMLBo4HaKrA4lb0gMC32kQ6id2hH
| 5syYKV/rRwF/a6O44ZvPY4LI1iDI+gl5WtGqdi4vQj7zI+fmcNYZKw/Oy5IQ8XMt
| yJAvX19M7OFNANflS9iIcMJYSYAESbqcJfFtLpmH/x6KMWV2RCRz7nf2IlndeJOl
| nU1nvv8d3RO0AE76kBHDLwJjM7leI030imdtzQjHv0ec4B0ppRZS7xGJc8p8hImS
| qIzE87xRUM0BPYpFB2untK4=
|_-----END CERTIFICATE-----
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Portainer
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|VoIP adapter
Running (JUST GUESSING): Linux 2.6.X|5.X (87%), Cisco embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.18 cpe:/h:cisco:unified_call_manager
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 5.18 (87%), Linux 5.4 (87%), Cisco Unified Communications Manager VoIP adapter (85%), Linux 2.6.26 (85%)
Aggressive OS guesses: Linux 5.4 (91%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21FC5%P=x86_64-pc-linux-gnu)
SEQ(SP=EE%GCD=1%ISR=FB%TI=Z%TS=A)
SEQ(SP=FE%GCD=2%ISR=108%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBCD8%P=x86_64-pc-linux-gnu)
SEQ(SP=100%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=106%GCD=1%ISR=107%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
@@ -87,24 +37,24 @@ T4(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 16.959 days (since Thu Mar 19 09:37:53 2026)
Uptime guess: 49.686 days (since Mon Feb 23 11:37:20 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=254 (Good luck!)
TCP Sequence Prediction: Difficulty=256 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.17 ms 10.216.0.161
2 0.28 ms 10.216.35.11
3 0.90 ms 10.216.32.2
4 0.35 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.31 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.66 ms 10.241.1.185
7 12.77 ms 10.241.2.26
8 14.22 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.07 ms 10.216.0.161
2 0.25 ms 10.216.35.11
3 0.88 ms 10.216.32.2
4 0.33 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 2.37 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.69 ms 10.241.1.187
7 12.62 ms 10.241.2.71
8 14.09 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:39:33 2026 -- 1 IP address (1 host up) scanned in 247.90 seconds
# Nmap done at Tue Apr 14 04:04:40 2026 -- 1 IP address (1 host up) scanned in 35.82 seconds
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md
-3
View File
@@ -1,3 +0,0 @@
```bash
curl -sSikf https://portainer.lan.ddnsgeek.com:443/robots.txt
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md
-29
View File
File diff suppressed because one or more lines are too long
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md
-305
View File
@@ -1,305 +0,0 @@
```bash
feroxbuster -u https://portainer.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
```
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt):
```
Configuration {
kind: "configuration",
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
config: "/etc/feroxbuster/ferox-config.toml",
proxy: "",
replay_proxy: "",
server_certs: [],
client_cert: "",
client_key: "",
target_url: "https://portainer.lan.ddnsgeek.com/",
status_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
replay_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
filter_status: [],
client: Client {
accepts: Accepts,
proxies: [
Matcher,
],
redirect_policy: "Policy(Custom)",
referer: true,
default_headers: {
"accept": "*/*",
"user-agent": "feroxbuster/2.13.1",
},
reqwest::config::RequestTimeout: 7s,
},
replay_client: None,
threads: 10,
timeout: 7,
verbosity: 1,
silent: false,
quiet: true,
output_level: Quiet,
auto_bail: false,
auto_tune: false,
requester_policy: Default,
json: false,
output: "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
debug_log: "",
user_agent: "feroxbuster/2.13.1",
random_agent: false,
redirects: true,
insecure: true,
extensions: [
"txt",
"html",
"php",
"asp",
"aspx",
"jsp",
],
methods: [
"GET",
],
data: [],
headers: {},
queries: [],
no_recursion: true,
extract_links: true,
add_slash: false,
stdin: false,
cached_stdin: [],
depth: 4,
scan_limit: 0,
parallel: 0,
rate_limit: 0,
filter_size: [],
filter_line_count: [],
filter_word_count: [],
filter_regex: [],
dont_filter: false,
resumed: false,
resume_from: "",
save_state: true,
time_limit: "",
filter_similar: [],
url_denylist: [],
regex_denylist: [],
scope: [
Url {
scheme: "https",
cannot_be_a_base: false,
username: "",
password: None,
host: Some(
Domain(
"portainer.lan.ddnsgeek.com",
),
),
port: None,
path: "/",
query: None,
fragment: None,
},
],
collect_extensions: false,
dont_collect: [
"woff2",
"woff",
"ttf",
"otf",
"eot",
"tif",
"tiff",
"ico",
"cur",
"bmp",
"webp",
"svg",
"png",
"jpg",
"jpeg",
"jfif",
"gif",
"avif",
"apng",
"pjpeg",
"pjp",
"mov",
"wav",
"mpg",
"mpeg",
"mp3",
"mp4",
"m4a",
"m4p",
"m4v",
"ogg",
"webm",
"ogv",
"oga",
"flac",
"aac",
"3gp",
"css",
"zip",
"xls",
"xml",
"gz",
"tgz",
],
collect_backups: false,
backup_extensions: [
"~",
".bak",
".bak2",
".old",
".1",
],
collect_words: false,
force_recursion: false,
update_app: false,
scan_dir_listings: false,
request_file: "",
protocol: "https",
limit_bars: 0,
unique: false,
response_size_limit: 4194304,
}
200 GET 9l 12w 249c https://portainer.lan.ddnsgeek.com/6d50eaeb9f128c130ed9.xml
200 GET 2l 106w 4308c https://portainer.lan.ddnsgeek.com/runtime.232d3b7a152978cbea8e.js
200 GET 5l 25w 2308c https://portainer.lan.ddnsgeek.com/d35773788f0de379e3d2.png
200 GET 16l 40w 3240c https://portainer.lan.ddnsgeek.com/b1f2baef7b5736909c25.png
200 GET 3l 11w 1595c https://portainer.lan.ddnsgeek.com/6102815b8a2c1fb84a24.png
200 GET 33l 2045w 340173c https://portainer.lan.ddnsgeek.com/vendor.5912aaf498ef1cf92d1e.css
200 GET 80l 3215w 1298619c https://portainer.lan.ddnsgeek.com/main.1a8779f936ef144f7430.css
200 GET 2l 110609w 4194304c https://portainer.lan.ddnsgeek.com/main.e2b4818b36c41561797a.js (truncated to size limit)
200 GET 2l 101342w 4177920c https://portainer.lan.ddnsgeek.com/vendor.ae489a06502bdb19da1a.js
200 GET 6l 319w 14202c https://portainer.lan.ddnsgeek.com/
200 GET 5l 9w 103c https://portainer.lan.ddnsgeek.com/locales/
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md
-3
View File
@@ -1,3 +0,0 @@
```bash
curl -sSikf https://portainer.lan.ddnsgeek.com:443/.well-known/security.txt
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
-148
View File
@@ -1,148 +0,0 @@
```bash
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" portainer.lan.ddnsgeek.com
```
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:49:58 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml portainer.lan.ddnsgeek.com
Nmap scan report for portainer.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:50:07 UTC for 1015s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-grep:
| (4) http://portainer.lan.ddnsgeek.com:443/vendor.5912aaf498ef1cf92d1e.css:
| (4) email:
| + rzajac@gmail.com
| + valentin@hervi.eu
| + jusasi@gmail.com
|_ + angelin.sirbu@gmail.com
|_http-date: Sun, 05 Apr 2026 08:53:34 GMT; -4s from local time.
|_http-malware-host: Host appears to be clean
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
| Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
| Content_Security_Policy:
| Header: Content-Security-Policy: script-src 'self' https://js.hsforms.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; frame-src https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
| Description: Define which scripts the protected resource can execute.
| Description: Define from where the protected resource can load plugins.
| Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
| Description: Define from where the protected resource can be embedded in frames.
| Cache_Control:
|_ Header: Cache-Control: max-age=31536000
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-mobileversion-checker: No mobile version detected.
|_http-title: Portainer
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-comments-displayer: Couldn't find any comments.
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_ Other: 1
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
| http-headers:
| Accept-Ranges: bytes
| Cache-Control: max-age=31536000
| Content-Length: 14202
| Content-Security-Policy: script-src 'self' https://js.hsforms.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; frame-src https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
| Content-Type: text/html; charset=utf-8
| Date: Sun, 05 Apr 2026 08:53:28 GMT
| Last-Modified: Thu, 19 Mar 2026 21:55:31 GMT
| Permissions-Policy: accelerometer=(),ambient-light-sensor=(),attribution-reporting=(),autoplay=(),battery=(),browsing-topics=(),camera=(),captured-surface-control=(),ch-device-memory=(),ch-downlink=(),ch-dpr=(),ch-ect=(),ch-prefers-color-scheme=(),ch-prefers-reduced-motion=(),ch-prefers-reduced-transparency=(),ch-rtt=(),ch-save-data=(),ch-ua=(),ch-ua-arch=(),ch-ua-bitness=(),ch-ua-form-factors=(),ch-ua-full-version=(),ch-ua-full-version-list=(),ch-ua-mobile=(),ch-ua-model=(),ch-ua-platform=(),ch-ua-platform-version=(),ch-ua-wow64=(),ch-viewport-height=(),ch-viewport-width=(),ch-width=(),compute-pressure=(),conversion-measurement=(),cross-origin-isolated=(),deferred-fetch=(),deferred-fetch-minimal=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),focus-without-user-activation=(),fullscreen=(),gamepad=(),geolocation=(),gyroscope=(),hid=(),identity-credentials-get=(),idle-detection=(),interest-cohort=(),join-ad-interest-group=(),keyboard-map=(),language-detector=(),local-fonts=(),magnetometer=(),microphone=(),midi=(),navigation-override=(),otp-credentials=(),payment=(),picture-in-picture=(),private-aggregation=(),private-state-token-issuance=(),private-state-token-redemption=(),publickey-credentials-create=(),publickey-credentials-get=(),rewriter=(),run-ad-auction=(),screen-wake-lock=(),serial=(),shared-storage=(),shared-storage-select-url=(),speaker-selection=(),storage-access=(),summarizer=(),sync-script=(),sync-xhr=(),translator=(),trust-token-redemption=(),unload=(),usb=(),vertical-scroll=(),web-share=(),window-management=(),window-placement=(),writer=(),xr-spatial-tracking=()
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| Vary: Accept-Encoding
| X-Content-Type-Options: nosniff
| X-Csrf-Token:
| X-Frame-Options: SAMEORIGIN
| X-Xss-Protection: 1; mode=block
| Connection: close
|
|_ (Request type: HEAD)
|_http-errors: ERROR: Script execution failed (use -d to debug)
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-useragent-tester:
| Status for browser useragent: 200
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
|_ PHPCrawl: 404
|_http-chrono: Request times for /; avg: 3701.07ms; min: 2889.80ms; max: 4836.97ms
| http-waf-detect: IDS/IPS/WAF detected:
|_portainer.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_ssl-date: TLS randomness does not represent time
|_http-feed: Couldn't find any feeds.
| http-php-version: Logo query returned unknown hash 7d7fd0684387b6c83a9f48f4eba1cad8
|_Credits query returned unknown hash 7d7fd0684387b6c83a9f48f4eba1cad8
|_http-traceroute: ERROR: Script execution failed (use -d to debug)
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-referer-checker:
| Spidering limited to: maxpagecount=30
|_ http://html5shim.googlecode.com:80/svn/trunk/html5.js
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:07:02 2026 -- 1 IP address (1 host up) scanned in 1025.54 seconds
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md
-201
View File
@@ -1,201 +0,0 @@
```bash
sslscan --show-certificate --no-colour portainer.lan.ddnsgeek.com:443 2>&1
```
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html):
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
Connected to 167.179.167.166
Testing SSL server portainer.lan.ddnsgeek.com on port 443 using SNI name portainer.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 06:c8:35:64:b2:70:d1:cb:f6:51:fb:d5:ce:ef:9c:42:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Mar 19 09:47:23 2026 GMT
Not valid after: Jun 17 09:47:22 2026 GMT
Subject: /CN=portainer.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:a3:26:e3:bc:ef:3c:d7:d9:7d:31:54:fc:ca:74:
51:9a:9b:4f:80:be:52:a4:d4:ff:ec:d9:64:b8:74:
9c:5e:17:0c:54:50:3b:71:6e:f9:55:37:43:33:29:
1b:c4:fd:f6:6c:e8:4f:c7:3d:32:cc:9b:a2:d2:07:
13:59:ee:6c:74:fc:9d:e9:93:7a:40:f0:ea:16:3a:
15:45:74:75:8c:2b:2f:ad:b0:d4:9e:d8:c2:03:a2:
fa:4a:6f:45:ce:6b:52:0e:0b:f3:90:95:dd:df:f1:
0b:c2:7e:9b:0b:7c:d9:3f:b8:3b:0e:03:26:56:3e:
7b:f4:60:4e:ca:28:ed:b7:f9:5f:59:2a:05:6f:e6:
e8:b9:ee:08:41:45:ee:b5:ff:e2:7f:88:56:7e:f7:
e6:61:05:15:60:05:9f:44:b9:4c:f5:9b:30:a0:eb:
9a:0f:ff:17:76:67:7b:90:e8:26:a0:bd:2e:3d:6b:
28:51:de:75:39:6b:75:ae:b7:45:e9:31:bc:d2:e9:
c0:74:8c:6c:db:99:e7:62:c0:52:1d:7e:c0:69:cc:
f3:29:9c:c3:7d:ca:1b:89:ad:60:d8:81:86:a2:e7:
be:af:af:0e:6a:29:46:43:d8:96:6a:a0:ec:f0:9f:
cb:7d:0b:99:f2:1f:57:e0:4c:91:99:9e:e0:ed:b8:
13:66:3b:c6:5f:f2:0d:3e:7a:05:20:cb:df:fc:96:
e2:1b:38:ea:48:aa:cd:ba:7b:1c:84:58:0c:9e:4f:
5a:21:d2:f2:72:77:bf:da:bf:2d:b9:6c:cc:05:c2:
d0:7c:56:c9:6b:3a:f3:30:9c:b1:86:5c:77:51:03:
89:5f:c5:45:3f:66:ea:37:93:af:23:bc:23:e9:67:
87:10:cb:4b:a6:ba:34:f7:24:d6:24:0a:e4:53:9b:
7d:36:92:bb:57:18:17:4d:4f:da:10:04:c6:79:f9:
b0:58:32:19:c9:e9:e0:fd:ab:57:1f:62:5a:fc:a5:
90:0a:14:d5:ca:8a:1e:d5:1c:93:2d:4c:49:fb:19:
b9:65:04:e3:b0:09:35:1b:f7:62:3d:75:d0:43:50:
73:54:bf:59:af:64:93:02:97:c2:48:49:f3:50:47:
25:63:d6:59:21:63:22:4b:b6:57:ac:3e:10:8f:7b:
e8:17:b2:ad:d6:6e:56:db:31:55:fd:30:c0:90:a1:
f2:c7:a3:17:12:02:7a:f3:14:30:d1:e7:72:c1:f8:
50:58:2f:e3:72:53:76:51:e3:c2:d1:fd:c6:53:86:
c6:4a:e7:00:82:b7:f6:dd:54:2d:9c:d2:48:4a:a3:
ce:7c:b9:08:94:74:f1:98:8b:ee:4f:8a:4e:74:bc:
4e:c7:0d
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
18:19:13:01:6B:F3:4B:28:2C:3C:D9:83:53:1E:99:47:65:9C:93:21
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:portainer.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/3.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
Timestamp : Mar 19 10:45:53.652 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:81:4C:23:22:7B:74:AC:1B:4E:60:23:
7A:9C:2A:C3:D4:42:8B:EE:91:00:FD:06:3B:2E:3F:F0:
3E:8B:55:3B:A8:02:20:79:6C:26:89:99:C7:CB:B8:30:
BE:C4:62:45:76:29:87:F7:D9:9A:5C:EE:56:7C:88:EF:
B0:14:42:69:7F:4F:79
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
Timestamp : Mar 19 10:45:54.497 2026 GMT
Extensions: 00:00:05:00:03:81:2A:93
Signature : ecdsa-with-SHA256
30:45:02:21:00:E1:6A:67:FB:61:34:9B:B0:64:57:31:
F4:AA:DB:E3:E4:2E:E9:F2:8C:0A:A6:95:A3:B1:85:B4:
20:28:04:83:FB:02:20:5B:E7:66:16:E7:DA:15:CF:6F:
09:00:44:A4:61:37:0B:31:D3:72:5E:6E:74:CC:71:9D:
E9:5B:54:5B:EF:86:4F
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: portainer.lan.ddnsgeek.com
Altnames: DNS:portainer.lan.ddnsgeek.com
Issuer: R13
Not valid before: Mar 19 09:47:23 2026 GMT
Not valid after: Jun 17 09:47:22 2026 GMT
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md
-9
View File
@@ -1,9 +0,0 @@
```bash
ffuf -u https://portainer.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.portainer.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_portainer.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
```
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_portainer.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_portainer.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt):
```
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md
-29
View File
@@ -1,29 +0,0 @@
```bash
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://portainer.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
```
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
+ Target IP: 167.179.167.166
+ Target Hostname: portainer.lan.ddnsgeek.com
+ Target Port: 443
---------------------------------------------------------------------------
+ SSL Info: Subject: /CN=portainer.lan.ddnsgeek.com
CN: portainer.lan.ddnsgeek.com
SAN: portainer.lan.ddnsgeek.com
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
+ Platform: Windows
+ Start Time: 2026-04-05 08:49:58 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ [999100] /: Uncommon header(s) 'x-csrf-token' found, with contents: .
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md
-86
View File
@@ -1,86 +0,0 @@
```bash
whatweb --color=never --no-errors -a 3 -v https://portainer.lan.ddnsgeek.com:443 2>&1
```
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):
```
WhatWeb report for https://portainer.lan.ddnsgeek.com:443
Status : 200 OK
Title : Portainer
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Meta-Author[Portainer.io], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,x-content-type-options,x-csrf-token], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Meta-Author ]
This plugin retrieves the author name from the meta name
tag - info:
http://www.webmarketingnow.com/tips/meta-tags-uncovered.html
#author
String : Portainer.io
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : content-security-policy,permissions-policy,x-content-type-options,x-csrf-token (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Security-Policy: script-src 'self' https://js.hsforms.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; frame-src https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 08:54:00 GMT
Last-Modified: Thu, 19 Mar 2026 21:55:31 GMT
Permissions-Policy: accelerometer=(),ambient-light-sensor=(),attribution-reporting=(),autoplay=(),battery=(),browsing-topics=(),camera=(),captured-surface-control=(),ch-device-memory=(),ch-downlink=(),ch-dpr=(),ch-ect=(),ch-prefers-color-scheme=(),ch-prefers-reduced-motion=(),ch-prefers-reduced-transparency=(),ch-rtt=(),ch-save-data=(),ch-ua=(),ch-ua-arch=(),ch-ua-bitness=(),ch-ua-form-factors=(),ch-ua-full-version=(),ch-ua-full-version-list=(),ch-ua-mobile=(),ch-ua-model=(),ch-ua-platform=(),ch-ua-platform-version=(),ch-ua-wow64=(),ch-viewport-height=(),ch-viewport-width=(),ch-width=(),compute-pressure=(),conversion-measurement=(),cross-origin-isolated=(),deferred-fetch=(),deferred-fetch-minimal=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),focus-without-user-activation=(),fullscreen=(),gamepad=(),geolocation=(),gyroscope=(),hid=(),identity-credentials-get=(),idle-detection=(),interest-cohort=(),join-ad-interest-group=(),keyboard-map=(),language-detector=(),local-fonts=(),magnetometer=(),microphone=(),midi=(),navigation-override=(),otp-credentials=(),payment=(),picture-in-picture=(),private-aggregation=(),private-state-token-issuance=(),private-state-token-redemption=(),publickey-credentials-create=(),publickey-credentials-get=(),rewriter=(),run-ad-auction=(),screen-wake-lock=(),serial=(),shared-storage=(),shared-storage-select-url=(),speaker-selection=(),storage-access=(),summarizer=(),sync-script=(),sync-xhr=(),translator=(),trust-token-redemption=(),unload=(),usb=(),vertical-scroll=(),web-share=(),window-management=(),window-placement=(),writer=(),xr-spatial-tracking=()
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Csrf-Token:
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://portainer.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://portainer.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:41:02 GMT
Date: Tue, 14 Apr 2026 04:04:44 GMT
Content-Length: 17
Moved Permanently
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://portainer.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://portainer.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:41:03 GMT
Date: Tue, 14 Apr 2026 04:04:44 GMT
Content-Length: 17
Moved Permanently
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md
-39
View File
@@ -290,44 +290,5 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
200 GET 5l 25w 2308c https://portainer.lan.ddnsgeek.com/d35773788f0de379e3d2.png
200 GET 16l 40w 3240c https://portainer.lan.ddnsgeek.com/b1f2baef7b5736909c25.png
200 GET 3l 11w 1595c https://portainer.lan.ddnsgeek.com/6102815b8a2c1fb84a24.png
200 GET 9l 12w 249c https://portainer.lan.ddnsgeek.com/6d50eaeb9f128c130ed9.xml
200 GET 2l 106w 4308c https://portainer.lan.ddnsgeek.com/runtime.232d3b7a152978cbea8e.js
200 GET 33l 2045w 340173c https://portainer.lan.ddnsgeek.com/vendor.5912aaf498ef1cf92d1e.css
200 GET 80l 3215w 1298619c https://portainer.lan.ddnsgeek.com/main.1a8779f936ef144f7430.css
200 GET 2l 110609w 4194304c https://portainer.lan.ddnsgeek.com/main.e2b4818b36c41561797a.js (truncated to size limit)
200 GET 2l 101071w 4161536c https://portainer.lan.ddnsgeek.com/vendor.ae489a06502bdb19da1a.js
200 GET 6l 319w 14202c https://portainer.lan.ddnsgeek.com/
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/[ => https://portainer.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/] => https://portainer.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/].txt => https://portainer.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/].html => https://portainer.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/[.txt => https://portainer.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/].php => https://portainer.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/[.html => https://portainer.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/].asp => https://portainer.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/[.php => https://portainer.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/[.asp => https://portainer.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/].aspx => https://portainer.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/[.aspx => https://portainer.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/].jsp => https://portainer.lan.ddnsgeek.com/].jsp
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/[.jsp => https://portainer.lan.ddnsgeek.com/[.jsp
200 GET 5l 9w 103c https://portainer.lan.ddnsgeek.com/locales/
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/plain] => https://portainer.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/plain].txt => https://portainer.lan.ddnsgeek.com/plain].txt
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/plain].html => https://portainer.lan.ddnsgeek.com/plain].html
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/plain].php => https://portainer.lan.ddnsgeek.com/plain].php
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/plain].asp => https://portainer.lan.ddnsgeek.com/plain].asp
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/plain].aspx => https://portainer.lan.ddnsgeek.com/plain].aspx
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/plain].jsp => https://portainer.lan.ddnsgeek.com/plain].jsp
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/quote] => https://portainer.lan.ddnsgeek.com/quote]
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/quote].txt => https://portainer.lan.ddnsgeek.com/quote].txt
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/quote].html => https://portainer.lan.ddnsgeek.com/quote].html
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/quote].php => https://portainer.lan.ddnsgeek.com/quote].php
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/quote].asp => https://portainer.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/quote].aspx => https://portainer.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://portainer.lan.ddnsgeek.com/quote].jsp => https://portainer.lan.ddnsgeek.com/quote].jsp
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://portainer.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://portainer.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:41:01 GMT
Date: Tue, 14 Apr 2026 04:04:44 GMT
Content-Length: 17
Moved Permanently
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+29 -29
View File
@@ -5,32 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:43:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml portainer.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:04:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/portainer.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml portainer.lan.ddnsgeek.com
Nmap scan report for portainer.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.017s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:43:39 UTC for 777s
Scanned at 2026-04-14 04:04:50 UTC for 175s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-date: Sun, 05 Apr 2026 08:44:05 GMT; -9s from local time.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-mobileversion-checker: No mobile version detected.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-vhosts:
|_128 names had status 308
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-malware-host: Host appears to be clean
|_http-feed: Couldn't find any feeds.
|_http-comments-displayer: Couldn't find any comments.
|_http-chrono: Request times for /; avg: 1142.96ms; min: 735.13ms; max: 1537.08ms
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-errors: Couldn't find any error pages.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-useragent-tester:
| Status for browser useragent: 200
| Status for browser useragent: false
| Redirected To: https://portainer.lan.ddnsgeek.com/
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
@@ -50,6 +35,29 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-feed: Couldn't find any feeds.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-errors: Couldn't find any error pages.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-comments-displayer: Couldn't find any comments.
| http-vhosts:
|_128 names had status 308
|_http-title: Did not follow redirect to https://portainer.lan.ddnsgeek.com/
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-chrono: Request times for /; avg: 529.26ms; min: 487.30ms; max: 569.23ms
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-malware-host: Host appears to be clean
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-mobileversion-checker: No mobile version detected.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-date: Tue, 14 Apr 2026 04:05:05 GMT; -2s from local time.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
@@ -57,24 +65,16 @@ PORT STATE SERVICE REASON VERSION
| Dir: /
| Total files found (by extension):
|_
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-title: Did not follow redirect to https://portainer.lan.ddnsgeek.com/
| http-headers:
| Location: https://portainer.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:46:41 GMT
| Date: Tue, 14 Apr 2026 04:05:15 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:56:37 2026 -- 1 IP address (1 host up) scanned in 784.25 seconds
# Nmap done at Tue Apr 14 04:07:45 2026 -- 1 IP address (1 host up) scanned in 182.02 seconds
```
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+61783 -55670
View File
File diff suppressed because it is too large Load Diff
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+23 -4
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://portainer.lan.ddnsg
[/root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://portainer.lan.ddnsg
+ Target Hostname: portainer.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:43:36 (GMT0)
+ Start Time: 2026-04-14 04:04:59 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:08:37 (GMT0) (1501 seconds)
+ End Time: 2026-04-14 04:17:32 (GMT0) (753 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+1 -1
View File
@@ -23,7 +23,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://portainer.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:48:11 GMT
Date: Tue, 14 Apr 2026 04:05:11 GMT
Content-Length: 17
Connection: close